Jonathan Sarrazin

**Name of the Vulnerable Software and Affected Versions** LMS5xx (affected versions not specified) **Description** The issue is related to weak hash generation methods used by the LMS5xx, resulting in the creation of insecure hashes. If an attacker retrieves the hash, it could lead to collision attacks and potentially allow the retrieval of the password. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LMS5xx (affected versions not specified) **Description** A remote unprivileged attacker can send multiple packages to disrupt the availability of the LMS5xx through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this issue, an attacker can flood the targeted system with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** LMS5xx (affected versions not specified) **Description** The issue concerns the use of hard-coded credentials in the LMS5xx, which could allow low-skilled unauthorized remote attackers to reconfigure settings and/or disrupt the device's functionality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SICK LMS5xx (affected versions not specified) **Description** A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the LMS5xx and the Client, and potentially manipulate the data being transmitted. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.